We are having an issue with our managed Apple TVs since upgrading them to TVOS 26.Sometimes this message can be cleared by pressing the menu button on the remote or hitting “Not Now”, but most of the times it comes back, and it then takes multiple presses to clear the message.We thought we had rectified the issue by re-enrolling. But, after about a week the issue returned.We don’t sign into the Apple TVs with an account, but some of the teachers do if they are in the constantly in the same classroom. For example, the Primary school teachers. The issue still happens to them. 

Today we released Jamf Connect 3.5.0; this release addresses the following product issues: [PI143260] Fixed: Importing a configuration profile into Jamf Connect Configuration with the User Promotion Choices (UserPromotionChoices) setting in use causes the array for the setting to be replaced by the following text: (. [PI143263, PI144134] Fixed: Jamf Connect presents the following one-time prompt on computers with macOS Tahoe 26.1 beta, both on the login window and on the desktop: Self Service+ wants to use your confidential information stored in "Jamf Connect" in your keychain. [PI143435] Fixed: When RapidIdentity is the identity provider, the Jamf Connect login window requests the local account password during the password verification workflow instead of the identity provider password. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional informati

Hi everyone,I’ve recently taken over maintenance of the Jamf Protect Batch Delete project to bring it back to life and ensure it stays compatible with the latest Jamf Protect updates.The app now includes a few quality-of-life improvements most notably Select All and Deselect All buttons for easier batch management.I’ve also created a .zip release so the tool can be easily downloaded and used right away.I’d love to hear your feedback, feature ideas, or improvement suggestions to make the tool even better for the community.Feel free to comment here or open a new issue with your ideas!You can grab the latest version here:👉 Download Release v1.0Thanks for supporting this project let’s keep it alive together!— Bryanhttps://github.com/Layer-Group

Hi there,A bit of background — I recently took over for our previous Jamf admin, who left unexpectedly. I have some Jamf experience (completed the training about eight years ago), but I’m still building up my troubleshooting skills.I’m working with an older iPad Pro that appears to max out at iOS 16.7.12. When I wipe the device, it doesn’t automatically grab the MDM profile or configuration during setup like our other iPads do. Instead, it just activates with Apple and sets up as a normal iPad. I can manually enroll it, but I’d prefer not to.I’ve confirmed that it’s listed in Apple School Manager, assigned to our MDM server, and included in the same PreStage Enrollment as the other iPads that work correctly after a wipe. I also tried deleting it from Jamf to see if it would re-sync, but it didn’t.One thing I’ve noticed is that under Automated Device Enrollment (DEP), the status shows “Sync Failed — Awaiting Next Sync.” However, other devices are enrolling fine, so I don’t think that’s

I am in a conundrum here.  Fresh out of the box I need all Office Apps deployed to our users.  Word, Excel, Outlook, OneNote, PowerPoint, Teams.  In the last wipe and reset on a device, it was taking forever for the apps to become available.  SelfService did not show them either as they are set to install automatically through the Jamf App Catalog.  I am looking for advice from the community to help me figure out the best method for deployment.  I need the apps to be there after deployment, my company requires them to be on the Current Channel and updated after each release of an update. I like having them visible in SelfService, but I do need the push method as well. Jamf App Catalog seems to limit this possibility unless someone has figured out a way around it.  I am not on SelfService+ as of now.  

Hi everyone,I’m running into an issue trying to upgrade Jamf Connect across our environment and hoping someone from Jamf or the community has seen this before.Until recently, I was able to update Jamf Connect using the dropdown underSettings → Jamf Apps → Jamf Connect → Deployment and Update Settings.That list used to automatically show each new version as Jamf released it (for example, 2.44 → 2.45).Now the dropdown has stopped updating — it’s capped at 2.45.1, even though 3.4.0 has been released publicly for several weeks.I’ve tried to manually handle the upgrade:• Downloaded JamfConnectLogin.pkg (3.4.0) from account.jamf.com.• Uploaded it into Jamf Pro (Cloud Distribution Point).• Created a policy to deploy it to test devices and tied it to our existing PreStage.• Policy runs successfully, reports “completed,” but the actual version on the Mac remains 2.45.1 — both in Get Info and when checking the bundle version via Terminal.• I’ve confirmed the correct PKG is being used, deleted th

Hello,Is it possible to configure Custom Analytic if someone unenrolls their device from Jamf Pro (i.e., uninstalls the Jamf MDM profile)?

Not sure I’ve seen a CVE list quite like this one... But where is 18.7.2? • macOS 26.1 - fixes 100+ CVEs• macOS 15.7.2 - fixes 50+ CVEs• macOS 14.8.2 - fixes 40+ CVEs• iOS 26.1 - fixes 50+ CVEs • watchOS 26.1 - fixes 30+ CVEs• tvOS 26.1 - fixes 29 CVEs• visionOS 26.1 - fixes 40+ CVEs • https://support.apple.com/en-us/100100

Connect 3.4.0Self Service+ 2.12.0OS 26.1 Tahoe (Many other machines on 26.0.1)I can not get this prompt to close no matter what I do. Everything in the back end seems fine with my machine and my connection to Jamf, self service, connect, everything, it all seems fine. Anyone have any ideas?  I did not see this issue prior to updating OS from 26.0.1 to 26.1 and that is the only thing I can think of that may be triggering it. I have tried deleting associated keys and allowing them to regen, I have tried flushing and re-pulling Config Profiles and Policies. P&S settings are all good. I have fond that if I leave the window there for 30min or more, it will finally close after entering PW and selecting Always Allow, but then comes back up after Reboot. 

This past July, I gave my third-ever presentation at a large conference: "swiftDialog for Overworked MacAdmins," at the Penn State University MacAdmins Conference. It wasn't my first time: I also presented in 2024 at MacAdmins on the topic of Compliance, and at the Consortium of Liberal Arts Colleges as part of our security response team on a phishing response workflow. I'm not a big name speaker. I'm not a well-known blogger, or tech writer, or popular person on Slack. I'm not on LinkedIn. I don't have any particular expertise, or much formal training. I'm not even a people-person. So what do I think I have to contribute to the community? I think, like you, that I have a lot to offer. Let me tell you why. If you're at all like me, and I think most IT admins are, we're just doing the best we can in often difficult circumstances: slim budgets, staffing issues, fractally-expanding scope of work. I don't know anyone who has enough time to do all the professional development work they thin

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

I have an issue were computers are retaining a profile even after the computer has been removed from the scope of the profile. I have a need to allow users to create computer level WiFi Profiles using their own user level credentials.  Having been advised (by JAMF back when they offered support to customers) that it is better to remove a computer from scope then to delete the profile I have another script for de-scoping the WiFi Profile. Unfortunately this does not result in the computer removing the profile. I have a hunch this might be caused by a fault in our Managed JAMF instance since previously we had a very similar issue that could only be resolved by marking a profile with a duplicate UUID as deleted. Since JAMF no longer provide support to their customers I have no way of getting this resolved. Does anyone have any suggestions on how to ensure a de-scoped profile is removed? or how to get support from JAMF?

Share your Halloween photos here! Carve or paint some pumpkins? We want to see them! You or your family and friends dress up in costumes? Share them here!   

We have historically given users who teach in Xcode the "Privileges" app from SAP because they insist that they need to run every update that comes out from Apple. Recently we noticed that one user has been abusing this app and installing various unapproved applications without going through IT first. We are wanting to see if there is a way that we can give a standard user the ability to run updates on Xcode only without having administrative privileges to do anything else or install any other applications.It looks like, in the past, a device (or user maybe?) could have been put into a Developer group which would allow them access to do things in Xcode that a standard user wouldn't, but still not be an admin. From what I have read, this doesn't seem to still be a possibility. Does anyone know if there is a guide to allow this? Or are we stuck using the Privileges app or someone from IT manually entering the admin credentials every time there is an update?

We took an M4 MacBook Pro that was already being used by the end user and installed Jamf Pro, which then in turn installed Connect and Protect.The installation went well. Had the user reboot and user got the message about no network connectivity. We tried a few WiFi connections and an ethernet cable. For the WiFi they are joining the networks but are failing to pull an IP. I verified in our WiFi management there was no DHCP request being sent. Had the user log in locally and they went right to black screens with a curser. A reboot only recreated the problem.However, once we rebooted into safemode, they had full network connectivity but still ran into a black screen after logging in and authenticating against Entra. I ended up having to pull off all the JAMF product to get the user working again, but the no-network-connectivity outside of safemade still persists.

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I’m trying to create a policy for a screenshot repository that save screenshot to another device. Hope someone can help me.

Hello Everyone, Happy Monday. I’m trying to get Jamf Account SSO enabled for my Jamf Cloud instance so we can use the compliance pane, but the OIDC app I created following the steps the Jamf Learning Hub provides does not create an Okta tile because the instructions tell you to set “Login initiated by” to “App Only” instead of “Either Okta or App”. However, when setting it to “Either Okta or App” it requires a “Initiate login URI” to save the settings. Other app documentation suggests using the “Sign-in redirect URI”, but then the tile goes to an error page.Is there a different URI I can use, or is what I’m wanting not possible, and I need create a bookmark to the Jamf Account login page?

Hello there, first time Poster here. I'm pretty new to the Administration of MacOS environments. My Company just started working with JamF, and I'm trying to figure out how to best handle OS Updates for the Users.I mainly found out about the options to use Nudge in combination with erase-install to have nice notifications and a solid way to force updates, or use SUPERMAN which seem to be able to do both, notifications and forcing updates. I have already tried around with Nudge for a bit and think its pretty cool. Im hoping someone can explain in a bit more detail what SUPERMAN does differently/better or worse than Nudge+erase-install and why they are using either of the solutions or even if they have a totally different approach! 

Hello everyone,We’ve been running it to some problems with some computers. Some computers doesn’t show any management commands, looks like bellow.Is there anything you can do remotely or local on the computer without needing to reinstall or reenroll?  

HiWhat is the difference between the two other than one is Jamf managed (?) and the other is getting stuff from the app store?Do both update?We have only 90 macs (won’t have much more..), and 1000 vpp licenses.Are both always on the same latest version, or App Store is more up to date?In use case is there a per-say difference?Thanks

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger doesn’t help eit

Hey guys,I have a MacBook Pro 14” 2023 that I enrolled into Jamf a few months ago. The version of macOS on it is 15.7. User requested an update to 15.71.Using the Software Updates in Content Management I sent out a command to Download and install → Specific version → 15.7.1When I go to the device inventory → Management → Operating System I see Update in progress but under that under Current state: RejectingPlan. I also tried to push out the Latest minor version but it also gives the same result. I also tried Download, install and restart and also tried to set a specific date and time but it still fails.I did a clear on failed and pending commands and tried again 5 minutes later. I also disabled the Software Updates option and then enabled it again.Any suggestions?I used Software Updates a few months ago to update 30 computers in a lab and it worked on 29 of them.Thanks! 

I need to get an inventory of VS Code extension in my enviromnent. I was going down the road of using Extension Attribute. I have this script created, and using Advnced Search to view the results.This script is returning the value of “Not Installed” for devices where VS code is not installed.Devices where VS Code do not report back any installed extensions. This is the code I am using#!/bin/bash# Define the location of the Visual Studio Code executable.VSCODE_APP_PATH="/Applications/Visual Studio Code.app"# Check if VS Code is installed.if [[ -d "$VSCODE_APP_PATH" ]]; then # List all installed extensions and their versions. # The output is piped to a series of commands to format it for readability in Jamf Pro. EXTENSIONS_LIST=$(/Applications/Visual\ Studio\ Code.app/Contents/Resources/app/bin/code --list-extensions | tr '\n' ',' | sed 's/,$//' | sed 's/,/, /g') echo "<result>$EXTENSIONS_LIST</result>"else # If VS Code is not installed, report "Not Installed".

We are super excited to be hosting our very first hybrid meetup in Las Vegas on October 30, 2025!!!Jaron Bradley from Jamf Threat Labs will be joining us to share some great knowledge, WorkBrew will also be sharing some knowledge! Doors at 5pm PDT for those attending in person to grab refreshments and get settled, then we’ll fire up the Zoom at 5: 30 PM PDT (honestly I’ll probably start it a bit earlier because I’m paranoid about needing time for troubleshooting) for presentations.RSVP to join in person at: https://luma.com/sd2gmrw6Can’t make it to Vegas? There’s a link to RSVP for the Zoom version at the bottom of in-person event.